This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft File: bBt3vE7dikuDdEdqc0dxm2drdV4.mft (raw, json) Hash identifier: ZEAnnOPWIA/S19MUpx7Eiq1CP0P5F0YGDq3RPimB3fo= Subject key identifier: BE:3B:77:E8:A7:3B:C2:38:B9:EF:6B:17:2F:49:32:A6:61:DC:BD:F4 Authority key identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E Certificate issuer: /CN=6c1b77bc4edd8a4b8374476a7347719b676b755e Certificate serial: 019C08FBD4A7BB6BECC9FEF32CF79BAB3743 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft Manifest number: 0988 Signing time: Thu 29 Jan 2026 09:00:47 +0000 Manifest this update: Thu 29 Jan 2026 09:00:47 +0000 Manifest next update: Fri 30 Jan 2026 09:00:47 +0000 Files and hashes: 1: bBt3vE7dikuDdEdqc0dxm2drdV4.crl (hash: THVHbX2omBo+XnflTDEqsBRBPqFoodG0SsZ/ibEbO94=) 2: e1omXpCIQpnerGyCBf44XvMH7b8.roa (hash: WuuVal2MbC5TVrn+qWtOZo1dB1Kr34wJojmJ2NY5UPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 09:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:08:fb:d4:a7:bb:6b:ec:c9:fe:f3:2c:f7:9b:ab:37:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1b77bc4edd8a4b8374476a7347719b676b755e Validity Not Before: Jan 29 09:00:47 2026 GMT Not After : Jan 30 09:00:47 2026 GMT Subject: CN=be3b77e8a73bc238b9ef6b172f4932a661dcbdf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4c:c2:83:31:1c:28:65:c8:3b:79:a3:b6:3d: 9f:00:a2:80:03:27:57:01:e2:3b:cc:c5:12:64:72: 79:44:01:a2:70:bc:0a:45:50:e5:1b:82:57:5f:53: 6e:7a:02:7d:45:3c:3d:28:a4:ca:d4:a8:6b:20:b6: d2:be:1d:a8:cb:07:ee:21:9d:ce:5b:94:6d:59:75: 17:99:2e:ed:ed:cd:74:6b:98:d6:91:c6:6a:7e:76: 39:f7:29:e2:5a:5a:30:ee:54:4d:d2:e7:ff:bd:41: 22:18:cd:37:1f:20:f7:b7:c2:af:a9:ed:79:13:f7: a2:3e:53:ff:87:7b:bc:43:cd:11:60:da:d6:a5:e6: 7f:86:c0:08:f7:8b:f7:33:21:29:16:76:8c:58:bb: bc:4e:ea:de:d2:ab:2e:a1:72:5c:1f:12:d5:06:e1: f4:a4:b6:81:28:f8:06:15:81:04:d2:e3:f5:2e:ec: f0:6d:88:ee:4b:4d:27:42:d7:ed:81:d1:5f:1b:71: e0:15:25:cc:8d:1a:b1:f0:f5:cc:42:c4:6d:82:32: b7:fa:9b:dd:f5:90:bb:23:2a:c7:7b:40:bf:52:86: ba:53:b3:9c:eb:0b:0c:a8:83:0c:50:ee:68:11:6a: 45:30:24:ad:ee:05:f8:33:92:bb:8a:9d:bc:ba:1b: da:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3B:77:E8:A7:3B:C2:38:B9:EF:6B:17:2F:49:32:A6:61:DC:BD:F4 X509v3 Authority Key Identifier: keyid:6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:01:b3:25:e5:96:76:9c:35:75:dd:e0:b0:ea:0f:4e:38:04: 05:c2:a4:d1:e9:6b:f5:f7:88:76:22:ef:ab:44:9c:0d:7b:83: 0a:d7:78:56:ae:1f:4a:d9:7e:9a:23:cb:7c:28:c0:9a:ae:a7: 68:dd:f7:07:00:e9:2c:f5:90:0b:e3:d7:4b:ef:2c:c0:d0:27: 6e:8b:75:0b:1f:27:57:94:3f:c2:16:56:2f:61:d3:9c:12:6a: 12:8d:d5:23:af:66:00:8f:70:6d:d8:2b:e7:8c:74:b2:e5:c0: a0:52:40:09:54:f0:59:9e:b2:42:90:ac:d1:f9:10:4f:e1:18: 85:95:b4:b7:b9:01:3f:c8:ec:58:7d:90:8f:ac:e3:ab:3b:41: c7:90:1e:46:1f:1b:14:a3:e2:4e:59:4c:bc:8a:1d:0c:7c:ea: ca:ad:b4:cb:03:ac:62:3d:81:9b:44:0a:2b:75:26:3c:fb:ed: f8:64:5a:77:22:53:8b:dd:b4:74:90:4a:a7:c5:c3:1e:d6:f6: bf:08:7d:53:9d:9b:f3:76:4d:fb:49:c6:bf:a4:dd:56:ad:19: 1a:7e:62:3c:25:76:7b:f8:fe:bd:a2:b9:63:bd:d9:fb:c0:cb: 3d:89:cc:d3:08:e3:71:67:13:47:c2:6f:37:87:9a:f5:5c:a9: b0:63:f2:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwI+9Snu2vsyf7zLPebqzdDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMWI3N2JjNGVkZDhhNGI4Mzc0NDc2YTczNDc3MTliNjc2 Yjc1NWUwHhcNMjYwMTI5MDkwMDQ3WhcNMjYwMTMwMDkwMDQ3WjAzMTEwLwYDVQQD EyhiZTNiNzdlOGE3M2JjMjM4YjllZjZiMTcyZjQ5MzJhNjYxZGNiZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0zCgzEcKGXIO3mjtj2fAKKAAydX AeI7zMUSZHJ5RAGicLwKRVDlG4JXX1NuegJ9RTw9KKTK1KhrILbSvh2oywfuIZ3O W5RtWXUXmS7t7c10a5jWkcZqfnY59yniWlow7lRN0uf/vUEiGM03HyD3t8Kvqe15 E/eiPlP/h3u8Q80RYNrWpeZ/hsAI94v3MyEpFnaMWLu8Ture0qsuoXJcHxLVBuH0 pLaBKPgGFYEE0uP1LuzwbYjuS00nQtftgdFfG3HgFSXMjRqx8PXMQsRtgjK3+pvd 9ZC7IyrHe0C/Uoa6U7Oc6wsMqIMMUO5oEWpFMCSt7gX4M5K7ip28uhvasQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL47d+inO8I4ue9rFy9JMqZh3L30MB8GA1UdIwQY MBaAFGwbd7xO3YpLg3RHanNHcZtna3VeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zNjdkMzktOGJlNC00ZWNiLTliYjYt ZmZkOTFiNDI1YTAwLzEvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zNjdkMzktOGJlNC00ZWNiLTliYjYtZmZkOTFiNDI1YTAw LzEvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwGzJeWW dpw1dd3gsOoPTjgEBcKk0elr9feIdiLvq0ScDXuDCtd4Vq4fStl+miPLfCjAmq6n aN33BwDpLPWQC+PXS+8swNAnbot1Cx8nV5Q/whZWL2HTnBJqEo3VI69mAI9wbdgr 54x0suXAoFJACVTwWZ6yQpCs0fkQT+EYhZW0t7kBP8jsWH2Qj6zjqztBx5AeRh8b FKPiTllMvIodDHzqyq20ywOsYj2Bm0QKK3UmPPvt+GRadyJTi920dJBKp8XDHtb2 vwh9U52b83ZN+0nGv6TdVq0ZGn5iPCV2e/j+vaK5Y73Z+8DLPYnM0wjjcWcTR8Jv N4ea9VypsGPy8g== -----END CERTIFICATE-----Generated at Thu Jan 29 19:24:23 2026 by rpki-client